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(57) Abstract 



A kiosk for use with smart cards includes a plurality of software services (200) accessible by one or more application programs 
executing in the kiosk through an application programming interface. The software services include operator interface functions (201). card 
data access functions (203). smart card stored value functions (204). and security functions (205). Various applications may be provided 
in the kiosk including applications for information access, card revalue operations, merchant ordering, and content delivery services. An 
automatic update feature (207) may be used to update data and code in the kiosk, and functions on smart cards which are inserted into the 
kiosk. 
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PROGRAMMING INTERFACE FOR A SMART CARD KIOSK 

This application is a continuation-in-part of U.S. application serial number 
08/414,495. filed on March 31, 1995, which is incorporated by reference herein. 
This application is also related in subject matter to commonly assigned copending 

application serial no. 08/ . entitled "Stored Value Transaction 

System and Method Using Anonymous Account Numbers ", filed on the same 
date herewith. 

BACKGROUND OF THE INVENTION 

1 . Technical Field 

This invention relates generally to computer terminals in systems which 
use smart cards (i.e., cards having an embedded microprocessor) for various 
purposes. More particularly, the invention provides a kiosk having a set of 
software services which allows vendors to interact with smart cards inserted into 
the kiosk in order to perform various functions. 

2. Related Information 

The use of smart cards to perform various types of transactions in systems 
is well known. For example, some systems provide a way for a cardholder to 
install a fixed amount of cash equivalent value onto a smart card and to spend the 
value on the card by inserting the card into any ot various types of devices, such 
as vending machines. After the value on a card is exhausted, the cardholder may 
"revalue" the card by inserting it into a machine and then inserting cash, a debit 
card, or a credit card to transfer additional funds to the smart card. 

Providing computer terminals in various types of systems which allow 
services to be purchased using smart cards is also well known: However, 
conventional computer terminals in such systems use proprietary designs which 
make it difficult, if not impossible, for third parry vendors lor "application 
service providers") to gain access to smart cards inserted into the terminals. Pan 
of this problem may stem from the fact that operators of such systems assume 
that all services will be provided directly by the system operator. The system 
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operator in effect has a monopoly on determining what services will be provided, 
how they will be provided, and the details of interfaces to the smart cards. Thus, 
a third pany vendor who wishes to provide a service to cardholders in the system 
has no easy way to "plug into" the computer terminal to provide such services. 

Additionally, system operators may use proprietary data storage 
techniques to install various types of applications and data on smart cards which 
are to be used in the computer terminal, thus makmg it difficult for third party 
application service providers to gain access to specific information on the cards. 
Even assuming that third pany providers were given access to the cards, there 
is no way to ensure that each vendor's data could be protected from access or 
modification by another vendor's application or by the system operator. Thus, 
vendors might be discouraged from providing their applications in the computer 
terminal in the absence of security provisions to prevent tampering with their 
applications or data on the smart cards pertaining to their applications. 

Finally, providing a plurality of different applications for use with a single 
smart card creates a configuration management problem when changes are made 
to the applications. For example, if a single smart card is configured to support 
an access control application, a library book check-out application, a cafeteria 
meal plan application, and a stored value "spend" function which can be used in 
vending machines and the like, changes to any one of these applications would 
require that the smart card be returned to a common, location and the card 
reconfigured to support the change. Requiring that a cardholder return to a 
central location to install the changes causes an inconvenience and lessens the 
utility of the card. 

The term "kiosk" will be used herein to refer to a computer-based 
transaction terminal which provides services to smart card users. 
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SUMMARY OF THE INVENTION 

The present invention solves (he aforementioned problems by providing 
a kiosk which provides a variety of application-level services for smart card- 
related applications, In particular, the invention provides an interface for 
vendors to install applications in a kiosk in order to conduct transactions with 
smart card users. The interface includes, in various embodiments and 
combinations, an operator interface including display and data entry functions, 
card data access services which can be used independently of the type of smart 
card or file structures used on the cards, stored value functions which can be 
used independently of the type of smart card or file structures used on the cards, 
and various security and PIN pad functions. 

In accordance with the principles of the invention disclosed in parent 
application serial number 08/4 14,495, incorporated herein by reference, the smart 
card kiosk can accept different types of smart cards and hide those differences 
from applications which interact with the smart cards. 

Additionally, the invention provides a kiosk which allows applications and 
corresponding data structures on a smart card to be automatically updated, 
without the cardholder's knowledge, when the card is inserted into the kiosk. 
Such an automatic update function can be used to correct defective applications 
previously installed on the smart card, to add new applications, or to change 
parameters associated with existing applications/ It can also be used to partially 
dtsable certain functions or applications without forcing the cardholder to entirely 
give up possession of the card. 

Finally, the invention provides a kiosk in which various counters and 
other information maintained on each smart card can be automatically extracted 
and uploaded to a system server each time the smart card is used in the kiosk. 
This automated collection process facilitates statistical analysis in the system 
server. 



The system may be employed on a college campus or at a company-wide 
location with devices coupled through a local area network or wide area network 
as suited to the particular geography. Various other objects and advantages of 
the present invention will become apparent through the following detailed 
description, figures, and the appended claims. 
RRfFF DESCRIPTION Q F THE DRAWINGS 

FIG. 1 shows a kiosk hardware configuration in accordance wuh various 
embodiments of the invention. 

FIG. 2 shows one possible software arrangement for providing 
application-level services in a kiosk in accordance with various principles of the 
invention. 

FIG. 3 shows a series of steps which may be performed to control the 
operation of applications at a kiosk. 

FIG. 4 shows some of the applications which are contemplated as being 
provided on a kiosk in accordance with the invention. 

FIG. 5 shows how personal information may be provided to a cardholder. 

FIG. 6 shows a series of steps which may be carried out to revalue a 
stored value card at a kiosk. 

FIG. 7 shows how a merchant ordering application may be provided at 

a kiosk. 

FIG. 8A and 8B show various pre-specified screen templates which may 
be used to create information displays at a kiosk. 

DETAILED DFSf!R fPTION OF THE P REFERRED EMBODIMENTS 

FIG. I shows a hardware configuration for a kiosk in accordance with 
various embodiments of the invention. Kiosk 100 may be coupled to a system 
server 101 over a network 113 such as a LAN or WAN using client-server 
protocols such as a DCEyEncina protocol for communication between the kiosk 
100 and system server 101. System server 101 may in rum be coupled to one 
or more financial networks 110 to perform financial transactions such as on-line 
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debits, credit transactions, and funds transfers. Additional kiosks 1 11 and 112 
may also be coupled to system server 101 over network 1 13. it being understood 
that the hardware and software descriptions pertaining to kiosk 100 also apply to 
these other kiosks. A vendor computer 1 14 may be coupled to system server 101 
through any of various means, such as computer networks, modems or the like 
The interaction between these various components is described in more detail 
herein. 

Kiosk 100 includes a computer and memory 102 coupled to various 
peripheral devices including CD-ROM unit 10* LAN interface 103, a secure 
access module (SAM) 105. encrypted PIN pad 106. a card reader 107 which may 
comprise a hybrid card reader able to read smart cards which have a magnetic 
stripe, display unit 108 which may comprise a touch panel display, and a printer 
109 which may be used for printing receipts of transactions. The arrangement 
shown in FIG. 1 is exemplary and is not intended to be limiting. In various 
15 embodiments, computer 102 may comprise an Intel-based microprocessor running 

the Windows™ operating system. 

In general, a cardholder inserts a smart card into card reader 107, views 
various options on display 108 for performing transactions, makes selections 
based on the displayed information, and obtains a receipt from printer 109. The 
kiosk may be arranged to perform certain functions without inserting a smart 
card. For example, informational services may' be provided to users without the 

use of smart cards. 

The kiosk 100 in FIG. 1 is illustrated as being equipped with peripherals 
which are suitable for a "stand-alone" configuration, such as might be placed in 
25 a shopping mall, a public place on a college campus, or a similar setting. 

However, a variation of kiosk 100 is also contemplated for a "private" setting 
such as for use in a* person's home. This variation, while still generally 
configured as shown in FIG. 1, is preferably configured to operate on a PC-type 
home computer and may omit certain peripherals such as PIN pad 106. and may 



20 



use a regular CRT type display instead of a touch panel display. 

Each kiosk may be configured with applications which allow users 
(including sman card holders) to conveniently retrieve information, and to order 
and pay for goods and services. For example, for a college campus selling, the 
kiosk may provide an application which displays the daily or weekly menu for 
cafeterias on the campus. As another example, the kiosk may provide an 
application which allows a card holding student to design and order copies of a 
resume which are then printed at a print shop for later delivery or pick-up. The 
latter could be done from the convenience of the student's PC configured as a 
kiosk in accordance with the principles of the invention. Other applications and 
features are described in more detail herein. 

FIG. 2 shows one possible software arrangement for providing 
application-level services in a kiosk in accordance with various principles of the 
invention. It is contemplated that the software features and structure shown in 
FIG. 2 is installed and operating on kiosk 100 shown in FIG. 1. As shown in 
FIG. 2, a set of kiosk applications 200 is provided on top of a plurality of 
application level kiosk services 201 through 207. These application level services 
may include, in various embodiments, an operator interface 201, kiosk server 
202, card data access functions 203, stored value functions 204. security 
functions 205, PIN pad functions 206. and automatic update functions 207. 

Operator interface 201 preferably provides a set of windowing functions, 
an "attract" screen which operates when the kiosk is idle, a set of standard 
templates which can be used by vendors to design an operator interface suitable 
for a particular application, and an order selection and accumulation function for 
compiling order information for applications which sell goods or services. 
Operator interface 201 preferably hides implementation details of display 209. 
such that vendors devel6ping kiosk applications need only make function calls to 
services in operator interface 201. The encapsulation and abstractions provided 
by operator interface 201 thus simplify and standardize the task of. creating 
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vendor applications which operate harmoniously on kiosk 100. 

Kiosk server 202 includes, in various embodiments, internal message 
routing functions for transmitting data among applications, and a kiosk control 
function for scheduling applications based on menu selections made by a 
user/cardholder. 

Card data access functions 203 includes a set of functions which may be 
used to retrieve, modify and store data contained on a smart card which has been 
inserted into smart card reader 210. Stored value functions 204 preferably 
include a group of functions which allow stored value on a smart card to be 
decremented or incremented as part of a devalue or revalue transaction. 

Additionally, a smart card application programming interface (SCRAPI) 
208 preferably provides a means of isolating differences among different rypes 
of smart cards from kiosk applications, as disclosed in parent application serial 
number 08/414.495. For example, one type of smart card may directly provide 
purse manipulation functions, while another vendor's smart card may not. One 
feature of SCRAPI 208 is thus to hide such differences from kiosk applications 
200 so that each vendor need not be aware of the various types of smart cards 
used in the kiosk. 

A group of security functions 205 is preferably included to allow various 
kiosk applications to perform authentication, encryption/decryption, and other 
related functions in conjunction with smart cards used in the kiosk. In various 
embodiments, such functions may be provided by a secure access module (SAM) 
211 which may be implemented in hardware or software. Security functions 205 
preferably isolate kiosk applications 200 from specific implementation details of 
SAM 211. In general, where a stored value card is used, a kiosk-to-card 
authentication process occurs using security functions 205. The authentication 
of a smart card using derived keys is well known and thus not explained in detail 
here. 
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A group of PIN pad functions 206 is included in various embodiments to 
allow kiosk applications to interface with an encrypted pin pad 212. 

Finally, a set of automatic update functions 207 is included in various 
embodiments to automatically collect information from smart cards inserted into 
5 the kiosk, to automatically enable or disable functions on smart cards used tn the 

kiosk, and to automatically update code and data in the kiosk. 

FIG. 3 shows a series of steps which may be performed in kiosk 100 in 
accordance with the software shown in FIG. 2. Beginning in step 301. an 
"attract" screen is displayed on display 209 during an idle state. This screen may 
10 comprise a "screen saver" type of image which moves across display 209 and 

serves to entice passersby to use the kiosk. For a college campus setting, the 
"attract" screen may include a campus logo or other type of image tailored to the 
particular campus. For a company- wide location, the image may comprise a 
company logo or a safety reminder, for example. 
15 in step 302, a test is made to determine whether any users are present, as 

might be determined by the pressing of a button or a touch-screen display, by 
detecting that a user has inserted a card, or by the output of a motion detector. 
If no users are present, then in step 303 a test is made to determine whether any 
remote updates from system server 101 need to be made. Examples of such 
20 updates include changing the daily menu for a campus cafeteria, installing new 

applications, or downloading other information used by various applications on 
the kiosk. One of ordinary skill in the an will recognize that rather than 
"polling" the server to determine whether any such updates are available, such 
updates may be automatically initiated by system server 101 The updates may 
25 preferably be made in two stages: a first stage in which files are downloaded 

from the server/and a second stage in which the downloaded information is 
installed as the operative configuration in the kiosk. In various embodiments, a 
Remote Code Update (RCU) software utility available from Tivoli. Inc. may be 
used to install code and data changes. 
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Although the data download stage may be performed concurrently with 
the execution of various applications at the kiosk, the installation stage is 
preferably performed while the kiosk is disabled to prevent users from attempting 
to use the kiosk. Accordingly, after data and/or code is downloaded from server 
101, in step 304 the display is preferably locked out (assuming that it is not 
currently in use) to prevent users from accessing the applications. In step 305, 
the changes to code and/or data are installed in the kiosk, then in step 306 the 
display is unlocked to allow users to again use the kiosk. 

In step 307, assuming that a user is present and no updates are currently 
in progress, a main menu is displayed on display 108 preferably under the 
control of kiosk server 202. The customer makes a selection from the menu, 
which may comprise any of various applications such as those shown in FIG. 4. 

Applications on kiosk 100 may be generally classified into one of two 
types: free applications for which no payment is necessary and no card is 
required, and payment applications, for which the user must provide payment in 
the form of a stored value debit, an on-line bank debit, or a credit card 
transaction. Assuming that the customer has selected an application for which 
payment is necessary, then in step 308 the customer is prompted to insert his 
smart card, which may comprise a GEMPLUS MPCOS™ card for example. 

In step 309, kiosk 100 automatically extracts counters from the inserted 
card under the control of automatic update functions 207 and transmits them to 
server 101 for statistical purposes. Examples of counters which may be extracted 
from the inserted card include the following: 

- number of transactions for which the card has been used 

- number, time, location, etc. of access control readers, such as parking 
garages or door locks in which the card has been used 

- number of library transactions for which the card has been used 

- number of meal plan transactions for which the card has been used 
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In step 310. a check is made based on information received from server 
101 as to whether any updates need to be made to the card. Such updates can 
include the installation of new applications (for example, adding a meal plan to 
the card, or adding library privileges), modification of existing applicat.ons (for 
example, chang.ng the meal plan a student is entitled to use), or 
deletion/disabling of existing applications (for example, revoking library or 
parking privileges). As another example, if a cardholder loses his card and 
reports its loss, system server 101 can disable the card the first time it is inserted 
into a kiosk during an attempted use by a finder of the card. 

In step 31 1. if any such changes are needed, the changes can be installed 
directly. on the card without the cardholder's intervention. As one example, a 
student's parking privileges may be revoked, and the student directly notified on 
the kiosk display, without disabling the entire smart card. In some situations, it 
mav of course be desirable to confirm with the cardholder that an update is to be 
made before it occurs. In any event, updates made to the smart card 311 are 
preferably controlled from central server 101 such that the server maintains an 
inventorv of the services and features which are available to the cardholder. 
Updates may be made by deleting a file on the card or setting a flag contained 
in a file on the card. Various variations are of course poss.ble. and the invention 
is not intended to be limiting in this respect. 

In step 310, if no card updates are pending, then' in step 312 the 
application selected by the user is executed. The selected application may 
comprise any of those shown in FIG. 4, or others as suitable for the part.cular 
kiosk. Also, after changes are installed on the card in step 311. the selected 
application is executed in step 312 (assuming that the particular application has 
not been disabled). After the cardholder finishes using any desired application, 
his card is ejected and. the kiosk returns to an idle state in which the aaract 
screen is displayed (step 301). THe card may remain in the kiosk while the 
cardholder uses multiple applications. 
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FIG. 4 illustrates some of the many applications which are contemplated 
as be.ng provided on kiosk 100. General information applications 401 may be 
provided at kiosk 100 without the need to insen a card into card reader 107. 
General information applications include maps of a campus or company location. 
5 menus for a cafeteria or restaurant updated daily or weekly, schedules of various 

events such as sporting events and library hours, advertisements for various types 
of products or services, or club information. In various embodiments, the 
.nformaiion needed to display the information depicted may be stored in 
computer memory 102 (which may include RAM. ROM. and/or disk) or CD- 
10 ROM unit 104 (see FIG. 1). Changes to the information provided by these 

applications may be made via automatic update functions 207 (see FIG. 2). 
Generally speaking, general information applications display information selected 
bv a user from touch screen display 108. One of ordinary skill in the art will 
recognize how to construct such information displays using information stored 
15 within kiosk 100. In various embodiments, the information may be provided 

through a set of window functions such as are provided by the Microsoft 
Windows™ operating system. Additional functions may be provided to augment 
basic windowing functions provided by the operating system, and templates (see 
below) may be used to provide a limited set of "standard" display formats. 
20 Personal information applications 402 allow a cardholder to access 

personal information stored on a smart card or maintained in system server 101 . 
It is generally contemplated that a cardholder needs to supply a PIN in order to 
access information such as the cardholder's name/address and other information, 
the status of various functions active on the card (such as displaying the meal 
25 plan currently active), grades, or the status of various financial accounts 

maintained in system server 101 or other computers. 

FIG. 5 shows how personal information may be provided to a cardholder. 
Beginning in step 501. the user is prompted to enter his PIN which was 
previously assigned. In step 502, the user's PIN is verified, preferably ustng a 
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PIN checking function on the card through the use of security functions 205 (see 
FIG. 2), Assuming that the PIN was correctly entered, in step 503 a 
determination is made as to whether the information is of a type stored on the 
smart card. If not, then in step 504 a request is made to server 101 to supply the 
requested information. If the information is stored on the card (such as a list of 
card functions and their status), then in step 505 the information is extracted 
from the smart card, preferably using card data access functions 203 (FIG. 2). 
In step 506. the information obtained either from the card or from server 101 is 
displayed to the user on display 108. It will be recognized that certain 
applications, such as the display of a student's grades, may be limited to a 
"private" kiosk on a student's home PC rather than at a public kiosk where 
sensitive information might be inadvertently displayed for others to see. 

Revalue card applications 403 provide a cardholder with the ability to add 
stored value to an inserted smart card using either an on-line bank debit 
transaction, an on-line credit card transaction, or inserting cash. FIG. 6 shows 
a series of steps which may be carried but to revalue a stored value card at ktosk 
100. Beeiruiing in step 601. the user selects a payment type (i.e.. debit, credit, 
or cash). In step 602, if it is determined that a debit payment is to be conducted, 
then in step 603 the user is prompted for h.s personal bank PIN (not to be 
confused with PINs used to authenticate the user with respect to the stored value 
card itself), and in step 604 an on-line bank debit transaction is initiated from 
system server 101 and the user's private bank account through financial network 
110 This step may include steps of extracting the user s bank account 
information from a magnetic stripe on the stored value card, combining it with 
the user's PIN (which may be provided in encrypted form via PIN pad 106 and 
extracted via PIN pad functions 206), and forwarding the request to system 
server 101 to initiate the bank transfer operation. Alternatively, the kiosk may 
be provided with a separate magnetic card reader which accepts the user s bank 
debit card to supply this information. Bank transfers may be carried out through 
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, .^h oc thnse provided bv Gensar, a company 
any of various banking services, such as those provia 

which provides such services in certain regions of the country 

If i„ step 605 it is determined that credit payment is des.red, then ,n step 
«6 a ban* credit transaction ,s initiated, prefer** using credit card account 

card or from a separate credit card inserted by the user into a magneuc strip 
reaj r (il wi., be appreciated that the same hybrid reader can be used for both 
card types). In either event, a credit transacts ,s imtiated from system server 
l0 l ulgh financial network 1 10 or other bank-to-ba^ protocols to obtain a 
credit authorization. 

bi „s too', bill acceptor (not shown) to accept the money. ^ 

,„ step 608. the value on the stored value card * updated to reflect the 
payment made by the user, .n various embodiments, this transactions 
0 ducted on-line with system server .0, using an anonymous account - 
„ h ,ch cannot be traced to the part,cu,ar — 
sertal number 08/ Ftnally, tn step 609. a rece.pt g 

pr,mcr »• «• - — - — apptal,on 404 

w „, be desert. Upon — o f a stored vafce card, a cardhoider may 
Mediate,, v.ew the card, balance on display ,08. ^ 
,„c,udes the step of using stored value h— 204 (see FIG. 2, to etre 
lard's balance «h,,e hid, g de.ils o f the stored value funcon ™p,— 
on the particuUr card. Additional the cardholder may vtew 
tactions stored on the card upon entry of a PIN which is venHed ^ W ~ 
dte stored vaiue ca'rd. prefer* through the use of secuncy funcuons JOS 
FIG. 2). 
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Merchant ordering applications 405 may include any of various types of 
applications which require payment by a user. For example, a user may order 
food such as pizzas, order goods from one or more catalogs the contents of 
which are accessible at kiosk 100, order books, or order items such as clothing 
from advertisements or other displayable images on kiosk 100. 

In various embodiments, merchants may be provided with software 
services such as these shown in FIG. 2 in order to design applications which arc 
executed on kiosk 100. For example, as described in more detail below, a set 
of standard templates may be used to create pre-defined images for presenting 
options to the user, making item selections, and for accumulating order totals and 
the like. Providing a limited set of such standard templates enhances 
commonality among applications provided at the kiosk and simplifies the task of 
developing kiosk-based applications 

FIG. 7 shows how a generic merchant ordering application may be 
provided at kiosk 100. In step 701, the user inserts his stored value card (or 
bank debit card, or credit card) into card reader 107. In step 702, a merchant 
menu display is provided under the control of kiosk server 202; the menu 
contains items defined by the particular merchant. For example, a pizza 
merchant might provide a display of different pizza sizes and toppings, while a 
catalog merchant might provide an opening display of a catalog page with options 
for paging through the catalog or performing a keyword search in the catalog. 
In step 703, the customer selects the particular product or service from the 
display. In step 704, if the customer's payment is to be from the stored value 
card itself, then in step 705 the value on the card ts decremented according to the 
order total. In step 706, a record of the stored value transaction is ored in 
kiosk 100 in a memory area, and in step 707 the specific merchant's merchandise 
is authorized (for example f an order can be placed in vendor computer 1 14 from 
system server 101). Payment to the vendor may be effected during a settlement 
process as described more fully in copending application serial number 
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On the other hand, if the customer chooses to use a debit transaction as 
payment (step 708). then in step 709 the customer is prompted to enter his bank 
PIN. and in step 710 an on-line bank debit operation is performed in a manner 
Similar to that shown and described with reference to FIG. 6. After the debit 
transaction is successfully performed, in step 707 the merchant s order for goods 
or services is authorized, again preferably by communicating with vendor 
computer 114. It will be appreciated that many different vendor computers may 
be provided in communication with system server 101. 

If in step 711 it is determined that payment will be made using a credit 
transaction, then in step 7 12 an on-line credit transaction is performed using steps 
similar to those described with reference to FIG. 6. Finally, in step 707 the 
specific merchant's transaction is authorized. 

Referring again to FIG. 4, a group of content delivery applications 406 
may also be provided on kiosk 100. In general, these may comprise the sale of 
information using payment mechanisms shown in FIG. 7 with reference to 
merchant ordering applications. Content delivery applications may include 
ordering excerpts from various books (including the payment of applicable 
copyright royalty clearance fees) or performing on-line research using databases 
20 which require payment for searches. 

Finally, on^iemand printing applications 407 may be provided at k.osk 
100 These services can include the formatting and content generation for 
resumes, papers (such as a thesis or book), or business cards. The payment 
mechanisms for these applications may be effected in the same manner as 
merchant ordering applications discussed above. However, for these applications 
the user may be required to provide substantially more information. For 
example, a draft copy of a resume in word processor format may be required. 
For resumes and business cards and the like, the user may be prompted to select 
from a variety of styles and print quantities. In effect, these services are 
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analogous to an on-line print shop. However, they can be provided cheaply and 
effectively from a smart card kiosk either at a public location or at a private 
kiosk in a student's home computer. 

FIGs 8A and 8B show various pre-specified screen templates which may 
be used to create information displays at kiosk 100. Screen template 800. for 
example, may be used for displaying a simple image, while screen template 802 
may be used for displaying a "rich text file" next ;o an image on, the same 
screen. These predefined screen templates may be provided as part of operator 
interface 201 to allow various merchants and application developers to gain 
provide applications at kiosk 100. 

In various embodiments, it may be desirable to use separate 
encryption/decryption keys for accessing data stored on each smart card. For 
example, a first key may be used for performing card value/devalue operations; 
a second key may be used for a second application, a third key may be used for 
a third application, and so forth. In this manner, data accessed on each card can 
be maintained with a higher degree of security, in that the compromise of a 
single key affecting a single application would not necessarily compromise other 

applications on the card. 

What has been described is a kiosk including a set of application level 
services which provides a convenient way of paying for and ordering various 
types of goods and services, and for obtaining information relevant to a particular 
kiosk location. The kiosk may automatically extract usage information from 
cards used in the kiosk and provide this information to a system server for 
statistical analysis. Additionally, code and data in the kiosk may be updated 
5 from the system server, and functions and data on each cardholder's smart card 

may be updated automatically without the user's intervention when the card is 

inserted into a kiosk. * 

It is apparent that many modifications and variations of the present 
invention are possible, and references to specific values or product are by way 
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of example only. The method steps of the invention may be practiced in a 
different ordered sequence from that illustrated without departing from the scope 
of the tnventton. U is, therefore, to be understood that within the scope of the 
appended claims the invention may be practiced otherwise than as specifically 

described. 
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CLAIMS 

1 A kiosk for use in a system employing a plurality of smart cards. 

comprising: 

a display device; 

5 a network interface for communicating with a server computer; 

a smart card reader for reading one of the plurality of smart cards; and 
a computer and associated memory coupled to the display device, the 
smart card reader, and the network interface, the computer programmed to 
provide at least one application program coupled to a plurality of application 
10 level services adapted to provide functions for application service providers, the 

application level services including 

a smart card data access function for retrieving data on a smart 
card inserted into the smart card reader; and 

an operator interface operable to provide window display functions 
15 on the display device in accordance with steps taken by the one application 

program. 

2. The kiosk according to claim 1 . wherein the application level services 
comprise a stored value debit function operable to decrement value stored on a 
smart card inserted into the smart card reader in accordance with steps taken by 

20 the application program. 

3. The kiosk according to claim I, wherein the computer is further 
programmed to provide an automatic update function which,, upon insertion of 
one of the smart cards, communicates with the server computer to determine 
whether any capabilities on the inserted smart card should be updated and, in 

25 response thereto, updates capabilities on the one inserted smart card. 

4. The kiosk according to claim 3, wherein the update disables a 
capability previously enabled on the inserted smart card. 

5. The kiosk according to claim 3. wherein the update enables a 
capability not previously enabled on the inserted smart card. 
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6 The kiosk according to claim 1. where.n the computer is further 
proerammed to automatically retneve a usage counter from a smart card inserted 
mto the card reader and transmit the usage counter to the server computer. 

7 The kiosk according to claim 1. wherein the computer is further 
5 programmed to display an "attract" screen in an idle mode and which, when 

performing an automatic update operation involving information transmitted from 
the computer server, disables use of the one application program. - 

8 The kiosk according to claim 1. wherein the one application program 
comprises a merchant ordering application which communicates with the 

10 computer server in order to provide a service offered by a merchant. 

9 The kiosk according to claim 1 . wherein the one application program 
comprises an on-demand printing application which accept, an order for a 
printing service provided by a merchant. 

10. The kiosk according to claim 1. wherein the operator interface 
1 5 comprises a plurality of predefined display templates. 

U The kiosk according to claim 1, wherein the computer is further 
proerammed to carry out an on-line debit transaction with a user's bank account. 

12 The kiosk according to claim 1, wherein the application level serves 

further provide card-level independence from particular types of sman cards 

20 inserted into the kiosk. 

1 3 The kiosk according to claim 1 . wherein the application level services 
comprise a group of security functions for performing security related operations 
with a smart card inserted into the kiosk. 

14 An application programming interface adapted to provide functions 
, 5 for an application program executing on a smart card kiosk, comprising: 

an operator interface comprising window functions operable to manipulate 
display images and a plurality of templates for displaying preformed unages; 

a plurality of card dau access services operable to retrieve data from 
smart card inserted into the smart card kiosk; 
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a plurality of stored value functions operable to increase and decrease 
value stored on a smart card inserted into the smart card kiosk; 

a plurality of security functions operable to encrypt and decrypt data 
durins communication with a smart card inserted into the smart card kiosk; and 

a PIN pad function operable to retrieve a PIN entered at the kiosk. 

15. The application programming interface according to claim 14, further 
comprising z general information application, coupled to the application 
programming interface, for providing general information on a display at the 
kiosk, wherein the general information is periodically updated via a server 
coupled to the kiosk. 

16. The application programming interface according to claim 15, 
wherein the general information application displays a cafeteria menu. 

17. The application programming interface according to claim 15, 
wherein the general information application displays maps. 

18. The application programming interface according to claim 14, further 
comprising a merchant ordering application, coupled to the application 
programming interface, which uses the operator interface for displaying a 
merchant menu comprising one or more products, and uses one of the stored 
value functions to decrement value on a smart card inserted into the kiosk prior 
to authorizing a transaction to provide the one or more products. 

19. A kiosk comprising a computer, a display uait, a smart card reader, 
and a network interface, wherein the computer is programmed to provide a 
plurality of kiosk applications and a plurality of application-level services, 

wherein the application-level services comprises an operator interface for 
performing window functions on the display unit, a plurality of card data access 
functions for interfacing with a smart card inserted into the smart card reader, 
and an automatic updatfc function for automatically updating, via the network 
interface, functions on a smart card inserted into the card reader, and 

wherein the plurality of kiosk applications comprises a general information 
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app.icauon for proving information received via the network interface on the 
display unit without inserting a smart card into the smart card reader, and a 
merchant ordering application for effecting payment for one or more products 
from a menu displayed on the display unit upon insertion of a smart card mto the 
smart card reader. 

20. The kiosk according to claim 19. further comprising a content 
delivery application for effecting payment for information specified by a user 
upon insertion of a smart card into the smart card reader. 

9i. The kiosk according to claim 19. further comprising an on-demand 
printing application for effecting payment for a printing job specified by a user 
upon insertion of a smart card into the smart card reader. 
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FIG. 3 
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FIG. 5 



501 



USER 
ENTERS 
PIN 



VERIFY 
PIN 



INFO 
'STORED ON 
CARD 
? 



r 504 



ISSUE . 
REQUEST TO 
SERVER FOR 

INFO 



YES 



r 



505 



EXTRACT 
INFO FROM 
CARD 



506 



DISPLAY 
PERSONAL 
tNFO 



SUBSTITUTE SHEET (RULE 26) 



BNSOOaO: <WQ 07l05e2A1> 



WO 97/10562 



PCT/US96/146S8 



6/9 



FIG. 6 




r 



603 



GET 




USER'S 


»» 


PIN 





604 



BANK 
DEBIT 
TRANSACTION 




1 

1 STOI 
VALUE I 
(ON-l 


' — , 
3ED 
J PDATE 
JNE) J 






GENERATE 
RECEIPT 



SUBSTITUTE SHEET (RULE 26) 



WO 97/10562 



PCT/US96/14658 



FIG 1 ! 3 / 



r 



701 



USER 
INSERTS 
CARD 



702 



DISPLAY 
MERCHANT 
MENU 



r 



703 



CUSTOMER 
SELECTS PRODUCT 
OR SERVICE 



704 



STORED 
VALUE TRANS- 
ACTION 



YES 



705 



DECREMENT 
VALUE ON 
CARD 



706 



STORE RECORD 
OF 

TRANSACTION 



707 



AUTHORIZE 
TRANSACTION 
(PROVIDE PRODUCT) 



708 

\ NO y&REDlf 
ON-LINE\!^/ TRANS 
DEBIT ? / \ACTION. 

9 



YES 



,-709 



YES 



r 



712 



ENTER PIN 
AT PIN PAD 



r 



710 



PERFORM 
- ON-LINE 
CREDIT 
TRANSACTION 



PERFORM 
DEBIT USING 
BANK ACCOUNT 



SUBSTITUTE SHEET (RULE 26) 



WO 97/10562 



PCT/US96/ 14658 



8/9 



r 

800 



802 



804 



806 



FIG. 8 A 





IMG 



RTF 



> 




RTF 



IMG 







IMG 


RTF 








-RTF 



801 



803 



805 



807 



RICH TEXT 
FILE. 




RTF 



IMG 




IMG 



RTF 



IMG 








RTF 


RTF 







BNSDOCtO: W6" J V7t Q562A1 > 



SUBSTITUTE SHEET (RULE 26) 



WO 97/10562 



PCT/US96/I4658 



9/9 



r 




SUBSTITUTE SHEET (RULE 26) 

BNSOOCID: «W6 97105«2A1> 



INTERNATIONAL SEARCH REPORT 



u^enuttionAl application No. 
PCT/US96/14658 



A. CLASSIFICATION OF SUBJECT MATTER 

1PC(6) :G06K 05/00 

US CL : 235/380 . 
According to International Patent Clarification (IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (clarification system followed by clarification symbols) 
U.S. : 235/380 



Documentation searched other than minimum documentation to 



the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and. where practicable, search terms used) 



APS 



search terms: kiosk smart card service attract screen operator interface counter 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



X,E 



Y 

Y.P 
Y.P 
Y.P 



Citation of document, with indication, where appropriate, of the relevant passages 



US 5,566.327 A (SEHR et al) 15 October 1996. entire 
document. 

US 5.530.232 A (TAYLOR) 25 June 1996. col3. line 47-col. 
5, line 11. 

US 5,473.690 A (GRIMONPREZ et al#5 December 1995. 
col 5, line 22-col. 6, line 44. 

US 5,542.669 A (CHARRON et alJ36 August 1 996, col. 11. 
line 35. 

US 5,212.369 A (KARLISCH et al) 18 May 1993, entire 
document. 



Relevant to claim No. 



1-21 



14-15 
1-21 



1-21 



None. 



^ Further documents are listed in the continuation of Box C. [J See patent family annex 



«ktered 



* Spend cate^ooca of cited documentor 

*A* documenidernuna-ibeienerai-tatec^Aeart which » oot co 

lo be of particular relevance 
*E" cartier document published oq or a/ler the a*ero»i*oo*J fdm« date 

*L* document which may throw doubts oo priority claimU) or which m 

c«ied * uf fr frh the pubuenboo date of toother citaboo or other 
apocial rmoq <a* apeciTied) 

*0- Ti ^j r— refemna to an oral d»cln*ure. u*e. cahibiboo or other 

•p- r ,MWK«j prior to the adcMQt**! fdrng dale but bier Chan 
the priority dale chimed 

Dale of the actual completion of the international search 
05 DECEMBER 1996 



later document public a/ler the intem-bona] fiUn, ***°<J»™£ 
date and Dot in eoo/bct w«h the applicauon but cted to underhand the 
pritfe^fc of th* or y underlying the invenooo 

document of p.rtKuia/ relevance; the claimed ^ vcoUOQ ^f i ^! 
ccW^d novel or cannot be coottfer* U> .nvolvc an mvenuve .up 
when the document *» taken alone 



Name and mailing address of the ISA/US 
Commiaiioncr of PaUnu and TradcmartJ 
BoxPCT 

Waahington. D C. 2023! 
Facsimile No- (703) 305-3230 
^ Form PCT/lSA/210 (second sheet)(July 1992)* 

-'- • v-^&0^r*r> '* 

BNSOOCIO: 4WO s ~' 971 0Sft2A1 > 



document of pirucular relevance; the cbin^v^oo^^ 
co«Mdered to mvoKe an mvenuve ftep when ^ hcoC ^ l0 *boo 
enenbmed with one or more other ruch document*. tucn ooa»«-«— 
be in* obvioua to ■ peraoo •kilted in the art 

document member of the aame patent family 

Date of mailing of the international search report 

2 4 DEC 1996 





International application No. 
PCT/US96V 14658 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



A 
A 
A 



Citation of document, with indication, where appropriate, of the relevant passages 



US 5,036,461 A (ELLIOT et al) 30 July 1991, entire document. 
US 4,928,001 A (MASADA) 22 May 1990, entire document. 
US 4,683,372 A (MATSUMOTO) 28 July 1987, entire document. 



Relevant to claim No. 



None 

None. 

None. 



Form PCT/ISA/210 (continuation of second fheet)(July 1992)* 



BNSOOCID: ^WO ■ W10562A1 > 



